1[v3_ext] 2basicConstraints = CA:false 3subjectKeyIdentifier=hash 4authorityKeyIdentifier=keyid 5nsCertType=server 6